COMPLETE LISTING OF THE CLAIMS 
The following lists all of the claims that are or were in the above-identified patent 
application. The status identifiers respectively provided in parentheses following the claim 
numbers indicate the current statuses of the claims. 

Claims 1-34 (Canceled) 

35. (Currently Amended) A computing platform comprising: 

a secure key-handling unit arranged to store a storage root key that forms the root node 
of a tree-structured node hierarchy the non-leaf nodes of which, other than the root node, 
each comprise, in encrypted form, a key used to encrypt the or each of its child nodes, and 

insecure storage for storing the hierarchy nodes other than the root node; 

the key-handling unit comprising: 

a memory for storing the storage root key and a current decryption-root key; 

a decrj^ted-access arrangement arranged to restrict decrypted access to the hierarchy 
nodes to those nodes decryptable by a chain of decryption rooted in said current decryption- 
root ke y, wherein the decrypted-access arrangement is operable in a mode where the current 
decryption-root key corresponds to a node of said hierarchy other than the root node and one 
or more nodes higher up in said hierarchy than is the node corresponding to the current 
decryption-root key are not available : and 

a current-decryption-root setting arrangement for storing in said memory, in docryptod 
form, the key of a selected non-leaf node of said hierarchy to serve as said current decryption- 
root key, the current-decryption-root setting arrangement enabling the selected non-leaf node 
to be changed. 

36. (Previously Presented) A computing platform according to claim 35, wherein the 
setting arrangement is arranged to permit the selected non-leaf node, and thereby the 
decryption-root key, to be changed only upon a predetermined set of at least one condition 
being met. 
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37. (Previously Presented) A computing platform according to claim 36, wherein at 
least one predetermined condition comprises the receipt by the key handling unit of an 
authorization value indicative of particular digital data. 

38. (Previously Presented) A computing platform according to claim 37, wherein said 
authorization value is a digest of a protected process associated with the node that is intended 
to be the new selected non-leaf node. 

39. (Previously Presented) A computing platform according to claim 36, wherein at 
least one predetermined condition comprises that a protected process associated with the node 
that is intended to be the new selected non-leaf node is about to be run by the computing 
platform. 

40. (Previously Presented) A computing platform according to claim 39, wherein at 
least one predetermined condition comprises that any other currently-activated processes 
running on the computing platform are benign. 

41 . (Currently Amended) A computing platform according to claim 36, wherein at 
least one predetermined condition comprises that the key-handling apparatus unit is requested 
to change the selected non-leaf node by a root of trust of the computing platform. 

42. (Previously Presented) A computing platform according to claim 35, wherein 
upon start up of the computing platform, the node at the head of the hierarchy, forms said 
selected non-leaf node. 

43. (Canceled) 

44. (Previously Presented) A computing platform according to claim 35, wherein the 
key-handling unit is arranged always to hold securely the node at the head of the hierarchy, in 
unencrypted form. 

45. (Canceled) 
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46. (Previously Presented) A computing platform according to claim 35, wherein the 
key-handling unit is arranged to indicate the selected non-leaf node by signing a value 
associated with the node using an identity key associated with the key-handling unit. 

47. (Previously Presented) A computing platform according to claim 35, wherein the 
key-handling unit is so arranged that only a particular type of non-leaf node, herein a dynamic 
key node, can be used as the selected non-leaf node in addition to the node at the head of the 
hierarchy. 

48. (Previously Presented) A computing platform according to claim 47, wherein the 
key-handling unit is arranged, upon receipt of a corresponding command, to generate a 
dynamic key node as a node of said hierarchy. 

49. (Previously Presented) A computing platform according to claim 35, wherein the 
setting arrangement is arranged to permit the selected non-leaf node to be changed to one 
associated with a protected process upon receipt by the key-handling unit of a reliable 
indication that a mechanism expected to resist subversion will attempt to enforce appropriate 
access restrictions on that node and any descendent nodes, the key of the non-leaf node 
associated with said protected process being available for use in relation to the protected 
process upon becoming the decryption root key. 

50. (New) A computing platform according to claim 35, wherein the key-handling 
unit comprises a Trusted Platform Module. 

5 1 . (New) A computing platform according to claim 35, wherein the current- 
decryption-root setting arrangement operates to decrypt content of the selected non-leaf node 
of said hierarchy to determine the current decryption-root key. 

52. (New) A computing platform according to claim 35, wherein the current- 
decryption-root setting arrangement stores in said memory, in decrypted form, the key of the 
selected non-leaf node of said hierarchy to serve as said current decryption-root key. 
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